Perhaps Im missin something in you requirement.
But What able disabling the account? I think thats the standard way to do that.
Either that or by making a password that only your App knows..

BR
Tim